Reset Account Lockout Counter

Mishra

In a Windows 2000 domain does the "Reset Account Lockout Counter after" not work like it is supposed to?

Mishra

I SUPPOSE I need to add what I expect.

I expect that if I set this to 30 minutes that if I type my password incorrectly 2 times and then get it right the 3rd time... Then if I log out in 5 minutes and try to log back in and get it wrong once then I have made the 3rd attempt as 30 minutes haven't passed. (http://www.windowsnetworking.com/kbase/WindowsTips/WindowsXP/AdminTips/Security/AccountLockoutPolicies.html)

In our (2000) domain if you log in then it resets the counter which from what I've read it isn't supposed to do that.

Mishra

I know there are 2000 domain nerds running around here somewhere. ^_^

meadIT

Mishra wrote:

I know there are 2000 domain nerds running around here somewhere. ^_^

I bet there are more than 2000 of them

royal

XtreemeChaos wrote:

Mishra wrote:

I know there are 2000 domain nerds running around here somewhere. ^_^

I bet there are more than 2000 of them

Bet eh? I bet $2000.

meadIT

royal wrote:

XtreemeChaos wrote:

Mishra wrote:

I know there are 2000 domain nerds running around here somewhere. ^_^

I bet there are more than 2000 of them

Bet eh? I bet $2000.

I win!!

Our users have posted a total of 252409 articles
We have 216309 registered users

theseman

A valid log in resets the counter.

Don't have a source handy for this right now.

-Travis

undomiel

I tried finding a reliable source the other day for it too and couldn't. My searching skills are failing me.

theseman

I will need to test this a bit to confirm, because everything I read says the counter is culmulative and does not get reset by a valid log in. This is not what I beleive I have experienced however.

Edit: Yeah it gets reset for sure.... so I am not sure what is up with the documentation!

Mishra

Yeah the only source I found that said that the valid log in attempt doesn't reset the counter I listed above. Everything else doesn't really talk about it.

Tontonsam

I have never experienced it before but normally it should reset the counter. Cause if I have configured the policy for 3 bad logons attemps, and after two bad attemps, it should reset it. That's like it works on w2k3 domain. Personnally, I think that it doesn't reset it after, it won't make sense.

tiersten

Resets after a valid attempt.

theseman

Good find, I couldn't locate an official source that stated the obvious in this case.

Mishra

tiersten wrote:

Resets after a valid attempt.

Thanks tiersten!